Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: Q+vMpCBa+Vli7BLmly7TXYqI6sRUw0j7wBJS3RW2C0A=
Subject key identifier: 3E:7C:1D:6E:2D:87:33:EE:A2:66:F3:EF:A5:03:26:AC:A6:D1:8F:F4
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019674C2CE8D311BF856282285D0F6B4B993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 1531
Signing time: Sun 27 Apr 2025 01:00:45 +0000
Manifest this update: Sun 27 Apr 2025 01:00:45 +0000
Manifest next update: Mon 28 Apr 2025 01:00:45 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: HcopCRNtYsKtaZUCWjd7ydjOCRNfAoxDSFQEfXAhnZ0=)
2: v-JLVzUeQuUcO68Dar1EDxEbp-Q.roa (hash: NLn149L4DdRbaEbvCsRst5D4kAzWBmCeuY2VmKeK9O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:ce:8d:31:1b:f8:56:28:22:85:d0:f6:b4:b9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Apr 27 01:00:45 2025 GMT
Not After : Apr 28 01:00:45 2025 GMT
Subject: CN=3e7c1d6e2d8733eea266f3efa50326aca6d18ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:0a:09:c7:a9:54:84:45:fb:db:82:62:84:
d8:f0:61:9d:eb:03:e5:b9:60:7a:bb:5d:05:ac:b2:
94:d8:ad:c9:9d:63:57:4b:83:0c:01:2c:50:ed:99:
c1:dc:fe:70:45:79:80:d1:b7:d4:de:6a:dd:53:f6:
5f:5f:ac:d6:77:2e:11:d8:e2:a8:d0:f3:46:ca:f4:
ed:31:2e:86:74:d9:4a:fb:23:c0:97:c9:87:d0:65:
5e:0f:a2:fa:ea:5c:a7:da:58:fe:0e:ba:91:ab:55:
46:20:5f:f3:52:c7:4f:bc:50:7e:8e:b7:b0:e4:29:
26:c3:48:8c:81:a2:d9:75:4d:63:78:56:bc:11:9c:
c8:3c:c6:3f:89:89:1d:46:5d:93:85:8a:e6:57:82:
ed:7b:17:36:06:a3:8d:dd:60:91:49:7f:4c:1b:6e:
37:36:d8:80:7a:29:50:37:8c:03:1b:b3:37:1f:f5:
17:b4:8d:68:29:5b:43:ec:2b:44:99:cf:33:c5:4c:
95:62:9a:74:c0:77:40:4b:d2:53:1b:1f:fc:d0:40:
c4:86:94:06:b9:6f:99:78:df:c7:91:df:8d:4f:4e:
c6:6b:a9:fb:73:99:47:ae:2d:27:ea:b3:ed:02:ac:
51:0e:69:72:74:e8:1a:6a:dc:28:77:8d:3e:f6:1f:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:1D:6E:2D:87:33:EE:A2:66:F3:EF:A5:03:26:AC:A6:D1:8F:F4
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:5a:7d:b1:50:f0:e4:76:b2:72:37:ff:77:db:8c:8b:39:
28:be:88:06:f6:07:ea:e4:00:d3:78:46:91:80:3d:73:38:c8:
34:09:85:2c:3b:1a:c1:dc:57:ec:96:92:aa:d8:c2:aa:6e:f8:
74:c9:15:1a:e7:b6:71:a3:53:b5:54:5e:27:4d:3e:74:5b:c5:
58:e6:bd:2c:c9:6e:6d:4a:2c:df:cf:17:77:2b:18:df:dc:8f:
bd:08:c0:06:cd:32:0c:fd:b1:13:21:b0:8b:fb:fc:d8:27:f5:
26:33:e2:ae:c2:29:0e:66:13:d7:f1:98:a1:3f:80:8f:2d:79:
26:1e:2e:5c:a5:f1:d2:4f:ab:30:4e:a6:d2:6b:bd:29:35:2c:
51:6d:5c:46:29:2b:79:e3:eb:d1:91:e6:9c:c2:3b:6c:ed:bf:
ae:d0:79:a0:c4:61:e8:2b:41:f0:aa:18:ec:d8:8f:d8:ed:fc:
17:01:b2:cd:08:73:57:0f:cc:5f:89:c8:22:82:fa:ae:8a:ec:
99:08:a7:4a:4e:28:68:de:f1:65:46:4e:85:1b:e2:29:b4:10:
7e:d1:33:59:45:fb:da:55:63:80:8d:07:5c:25:2e:a7:85:3f:
66:2e:e9:18:ed:17:61:ae:42:66:69:46:3d:f7:99:fa:9b:ee:
a7:df:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:25:05 2025 by rpki-client